Cyber Security Governance Specialist

📋 Description

• • Shape the future of motor insurance security at Prima. Since 2015, our data-driven approach has made us Italy’s #1 online motor insurer, trusted by 5 million drivers. Now expanding into Spain and the UK, we need a Cyber Security Governance Specialist to safeguard millions more.
• • Own and evolve the cybersecurity governance framework. You will author, update, and socialize policies, procedures, and controls that map directly to ISO/IEC 27001, NIST CSF, COBIT, GDPR, DORA, and any emerging regulatory standards. Your documentation will become the single source of truth for auditors, engineers, and executives alike.
• • Drive continuous improvement through rigorous security audits and gap analyses. You will design audit scopes, execute assessments across cloud and on-prem environments, quantify risk in business-impact terms, and craft pragmatic remediation roadmaps. Each finding you raise will translate into engineering tickets, budget requests, and OKRs that measurably reduce risk.
• • Lead third-party security and resilience assessments. From SaaS vendors to data-center providers, you will build repeatable vendor-risk questionnaires, conduct on-site/virtual assessments, and negotiate contractual security clauses that protect Prima’s data and reputation.
• • Strengthen Business Continuity Management and IT Disaster Recovery posture. You will orchestrate Business Impact Analyses (BIA), map critical asset dependencies, define Recovery Time Objectives (RTOs) and Recovery Point Objectives (RPOs), and run tabletop simulations and full-scale DR tests. When incidents strike, your pre-work ensures we rebound within SLA.
• • Champion cybersecurity culture across 300+ engineers and the wider business. You will design and deliver role-based security training, phishing simulations, onboarding modules, and executive briefings that turn compliance checklists into shared habits.
• • Collaborate daily with multidisciplinary squads. You will translate regulatory jargon into user stories, pair with DevOps to embed controls into CI/CD pipelines, and advise Product Managers on secure feature design. Your influence will be felt from sprint planning to board-level risk reports.
• • Report directly to the Head of Security and influence strategic decisions. Your metrics will feed into quarterly OKRs, regulatory submissions, and investor due-diligence packs. Expect visibility and the autonomy to pilot innovative governance tools.
• • Enjoy full-remote flexibility across Spain, Italy, or the UK, with up to 30 days per year of “work-from-anywhere.” Whether you prefer a home office in Madrid or a beachside café in Palermo, results matter more than location.
• • Thrive in a culture that celebrates experimentation. Join hackathons, security guilds, and cross-functional tiger teams where your governance expertise will spark creative solutions and rapid prototypes.